$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: UwJn/pEJB/etcW9V5yGGHt4ClLtIUdQqsCjnrNtCi6w= Subject key identifier: 02:E6:B9:8B:85:89:A4:A8:4F:BB:7A:7C:05:CE:A9:EC:FB:FD:A7:E7 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0198D473CF73B7481A7F3D8AE2926F249CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1671 Signing time: Sat 23 Aug 2025 01:03:36 +0000 Manifest this update: Sat 23 Aug 2025 01:03:36 +0000 Manifest next update: Sun 24 Aug 2025 01:03:36 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 8: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 9: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 10: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 11: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 12: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 13: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 8xc06xGiZXNaDR/tkkLXsr3mn7q1NqWN6uoQCB48Fh8=) 15: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 16: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 17: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 18: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) 19: zzxDA_jaGZ-licmX7_8AfzWVEg4.roa (hash: yQZb/wWXMNaCLJYPnwrZFiYxI3PMack8phKpUQ0e+Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:cf:73:b7:48:1a:7f:3d:8a:e2:92:6f:24:9c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Aug 23 01:03:36 2025 GMT Not After : Aug 24 01:03:36 2025 GMT Subject: CN=02e6b98b8589a4a84fbb7a7c05cea9ecfbfda7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:17:ec:5c:ac:f4:ad:8c:a9:a2:c2:fa:cf: cd:9b:2b:00:ac:cf:fd:c1:68:0a:5e:e7:21:3d:82: e3:77:bf:af:76:5c:87:fc:71:41:1e:b1:e3:cd:d6: fc:ae:29:42:d7:f0:b2:0c:0b:e6:5f:c7:77:ee:48: 67:81:2f:cb:d3:ba:49:2f:7f:b8:9a:ae:57:87:2b: 4f:bb:76:e0:b7:a9:7a:6c:66:25:1c:06:c6:b8:c4: c3:c6:10:f8:88:ac:6f:ad:38:c0:2f:ce:98:8a:ab: ee:a2:5c:49:ba:04:c3:5d:98:bf:01:5c:3e:30:54: a4:a7:43:dc:79:ee:aa:dd:81:b9:bb:4a:3e:19:67: 2d:96:4e:e7:21:c6:d2:53:cf:09:10:c3:ea:8d:be: bc:22:88:4e:eb:03:37:76:88:16:51:65:d8:fb:55: 4e:5a:61:5f:e0:77:7e:33:1b:01:37:d5:c6:66:6d: f0:48:65:15:4a:e5:62:3d:2f:a1:a4:ac:72:d2:e5: 1a:88:27:89:ed:56:d1:54:dc:de:d8:15:67:f4:02: 2d:db:c1:31:1f:3e:4b:cf:dd:0a:3d:9c:e8:1e:5a: 63:7b:c4:13:68:12:72:43:45:c4:39:9c:ab:22:48: 91:2f:40:84:66:dd:bb:3b:0f:b0:1a:71:82:ba:82: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E6:B9:8B:85:89:A4:A8:4F:BB:7A:7C:05:CE:A9:EC:FB:FD:A7:E7 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9a:4e:58:71:9c:a1:77:41:ef:a3:fa:6e:58:ba:b1:88:25: 16:fb:b9:92:3e:74:21:9d:47:57:e7:ca:7a:88:ea:97:31:a8: 01:6f:ea:26:06:a9:b2:2c:6c:cb:59:ea:0b:10:c2:f1:41:e7: a1:d6:3a:65:f2:a3:d1:57:9b:c2:c4:d5:02:5a:d5:69:30:51: 31:f6:7a:9c:a4:9b:27:59:aa:26:8f:5e:cd:96:b8:dc:0f:94: 91:2c:55:de:76:d5:90:e0:9b:73:7b:71:4c:60:7a:9e:d0:8f: e0:3a:d7:14:4a:16:86:25:c7:3c:8d:ca:93:29:ae:08:ed:da: 1c:52:fe:a2:ce:e6:96:b0:b2:b0:a1:51:e0:cf:6a:3d:22:25: 05:a7:c3:f0:02:64:2c:2d:1b:37:26:cf:fd:ef:4b:2e:12:b2: b3:05:b0:fd:ed:af:5f:d5:1d:de:90:df:d5:50:e8:7e:6d:0c: 6a:e5:a4:34:f0:bf:cd:88:dc:59:19:f1:e8:af:01:33:2b:89: 87:c6:0b:e1:a7:26:a5:7f:ae:34:42:c9:24:e3:32:e1:59:1b: 5a:74:ae:24:c3:ad:d2:eb:1d:95:fb:bf:24:70:b2:d1:b1:2c: 02:33:e7:56:8e:f6:c5:24:0d:27:05:75:76:08:57:37:2f:86: fa:cc:28:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc89zt0gafz2K4pJvJJzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD EygwMmU2Yjk4Yjg1ODlhNGE4NGZiYjdhN2MwNWNlYTllY2ZiZmRhN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU8X7Fys9K2MqaLC+s/NmysArM/9 wWgKXuchPYLjd7+vdlyH/HFBHrHjzdb8rilC1/CyDAvmX8d37khngS/L07pJL3+4 mq5XhytPu3bgt6l6bGYlHAbGuMTDxhD4iKxvrTjAL86YiqvuolxJugTDXZi/AVw+ MFSkp0Pcee6q3YG5u0o+GWctlk7nIcbSU88JEMPqjb68IohO6wM3dogWUWXY+1VO WmFf4Hd+MxsBN9XGZm3wSGUVSuViPS+hpKxy0uUaiCeJ7VbRVNze2BVn9AIt28Ex Hz5Lz90KPZzoHlpje8QTaBJyQ0XEOZyrIkiRL0CEZt27Ow+wGnGCuoKUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALmuYuFiaSoT7t6fAXOqez7/afnMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGppOWHGc oXdB76P6bli6sYglFvu5kj50IZ1HV+fKeojqlzGoAW/qJgapsixsy1nqCxDC8UHn odY6ZfKj0VebwsTVAlrVaTBRMfZ6nKSbJ1mqJo9ezZa43A+UkSxV3nbVkOCbc3tx TGB6ntCP4DrXFEoWhiXHPI3KkymuCO3aHFL+os7mlrCysKFR4M9qPSIlBafD8AJk LC0bNybP/e9LLhKyswWw/e2vX9Ud3pDf1VDofm0MauWkNPC/zYjcWRnx6K8BMyuJ h8YL4acmpX+uNELJJOMy4VkbWnSuJMOt0usdlfu/JHCy0bEsAjPnVo72xSQNJwV1 dghXNy+G+swoEg== -----END CERTIFICATE-----Generated at Sat Aug 23 09:48:45 2025 by rpki-client